Skip to content

Commit

Permalink
Update SECURITY.md
Browse files Browse the repository at this point in the history
  • Loading branch information
flyflyinit authored Sep 15, 2023
1 parent 7607189 commit cd3db86
Showing 1 changed file with 1 addition and 3 deletions.
4 changes: 1 addition & 3 deletions SECURITY.md
Original file line number Diff line number Diff line change
Expand Up @@ -53,11 +53,9 @@ It is essential to use a dedicated secret management system to securely store an
- Azure Key Vault

Access to secrets should be limited to only those who require it to perform their duties. Access should be granted based on the principle of least privilege. This means that users should only be granted the minimum level of access necessary to perform their job duties.
-- to be completed --

## Use Encryption
When transferring secrets, they should be encrypted both in transit and at rest. TLS should be used when transferring secrets over the network, and secrets should be encrypted when stored in the secret management system. Terraform also has the capability to encrypt state files using a passphrase.
-- to be completed --

## Conclusion
Proper management of Terraform secrets is critical to maintaining the security of your infrastructure. By following the best practices you can reduce the risk of secrets being compromised.
Proper management of Terraform secrets is critical to maintaining the security of your infrastructure. By following the best practices you can reduce the risk of secrets being compromised.

0 comments on commit cd3db86

Please sign in to comment.